Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/w3wauiv-QJs3_bg-c9EnU6s3hYU.roa
File:                     w3wauiv-QJs3_bg-c9EnU6s3hYU.roa (raw, json)
Hash identifier:          IrWQozUqkJesUYv9fZ+h+/SAl8Jd8WHZ6UhySKr2yQs=
Subject key identifier:   C3:7C:1A:BA:2B:FE:40:9B:37:FD:B8:3E:73:D1:27:53:AB:37:85:85
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       24
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/w3wauiv-QJs3_bg-c9EnU6s3hYU.roa
Signing time:             Sat 31 Aug 2024 01:31:25 +0000
ROA not before:           Sat 31 Aug 2024 01:31:25 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     55376
IP address blocks:        27.118.0.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Aug 31 01:31:25 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=C37C1ABA2BFE409B37FDB83E73D12753AB378585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:5d:3a:c6:a5:ef:b8:c3:83:b9:f3:e2:5c:
                    90:f5:38:e2:4c:76:30:32:ca:c2:ce:0a:0b:dd:2f:
                    9c:c6:38:a7:23:53:ec:db:39:9a:78:d6:e7:b4:bc:
                    43:53:3b:45:2b:f5:b4:54:90:21:3a:9d:16:91:59:
                    4b:37:d3:ce:f6:1c:35:f1:89:2f:6b:3d:73:ba:9d:
                    41:c1:e5:da:a4:52:31:74:ff:21:4f:16:21:fc:0e:
                    08:b0:24:09:5e:e4:7b:e3:74:9e:ca:96:bf:ab:5a:
                    47:d1:5c:4f:9a:ae:67:f5:a1:73:98:d7:70:b5:92:
                    9f:ec:ab:f9:ef:71:54:5b:e0:95:3c:72:02:3f:35:
                    a5:90:31:c9:a4:91:58:9a:44:fa:20:33:cf:f8:b7:
                    11:e8:40:39:95:60:1e:0d:27:f2:f5:17:55:d7:2e:
                    1d:ce:fe:27:50:79:9d:f3:c5:75:57:12:32:26:d0:
                    a1:f0:03:85:88:ab:02:96:de:bc:8e:be:9f:c0:b8:
                    75:42:54:44:12:4b:80:17:1e:db:b9:7f:bb:de:e0:
                    29:75:b4:3a:11:69:f6:f4:dd:d8:aa:ba:d8:86:2d:
                    b9:07:b0:e3:2c:6c:65:ff:9d:39:ec:a6:78:b2:3b:
                    39:d4:48:b3:ff:64:df:7d:52:d2:a4:6c:5e:0f:ac:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:1A:BA:2B:FE:40:9B:37:FD:B8:3E:73:D1:27:53:AB:37:85:85
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/w3wauiv-QJs3_bg-c9EnU6s3hYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.118.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:0e:78:68:21:c3:62:8c:b4:dd:12:4d:31:57:73:6c:6e:
         49:36:36:78:90:fa:a8:fb:39:13:ea:1e:b3:1c:a9:6b:2f:e5:
         7d:00:bd:ea:99:2e:7f:64:ba:99:c5:2f:dd:72:40:4b:11:4c:
         b9:3e:ea:91:21:ac:03:73:4a:2d:5e:61:b1:92:7b:6c:59:d4:
         19:22:55:f6:83:d3:64:81:cf:4f:6c:98:06:e6:9a:10:37:51:
         b9:83:38:33:c0:17:10:8d:b8:41:70:4f:bf:63:9b:27:ff:61:
         0d:23:ee:77:ba:ba:dc:75:b4:81:4b:b0:12:07:de:0d:45:14:
         87:33:5d:1d:8f:50:9c:0b:fe:88:73:b3:8b:26:27:ae:af:08:
         fb:51:01:27:72:e0:2f:e5:fb:d7:3a:eb:3d:23:ab:36:8e:c5:
         2c:df:48:26:46:15:c9:18:fa:d0:10:c1:47:7f:44:05:72:e5:
         c8:f2:d6:bd:f6:bd:00:0d:0d:5f:43:9a:5f:60:16:d7:f8:86:
         5d:d3:5c:85:cf:33:41:9c:17:57:0d:06:70:bf:99:bd:73:80:
         d1:ab:96:ae:e9:97:0a:aa:5d:10:f2:e3:2e:0f:f5:be:50:b6:
         5a:db:7a:61:72:d7:5c:76:7e:38:0a:98:87:3c:a6:40:5c:19:
         ef:fc:cb:c5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQUVE
MEUzNUE3QjU4REFDMjE1OUY3RjFDRDc0MEE1NEI5RThCNDA3MB4XDTI0MDgzMTAx
MzEyNVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzM3QzFBQkEyQkZFNDA5
QjM3RkRCODNFNzNEMTI3NTNBQjM3ODU4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7xXTrGpe+4w4O58+JckPU44kx2MDLKws4KC90vnMY4pyNT7Ns5
mnjW57S8Q1M7RSv1tFSQITqdFpFZSzfTzvYcNfGJL2s9c7qdQcHl2qRSMXT/IU8W
IfwOCLAkCV7ke+N0nsqWv6taR9FcT5quZ/Whc5jXcLWSn+yr+e9xVFvglTxyAj81
pZAxyaSRWJpE+iAzz/i3EehAOZVgHg0n8vUXVdcuHc7+J1B5nfPFdVcSMibQofAD
hYirApbevI6+n8C4dUJURBJLgBce27l/u97gKXW0OhFp9vTd2Kq62IYtuQew4yxs
Zf+dOeymeLI7OdRIs/9k331S0qRsXg+sv5MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTDfBq6K/5Amzf9uD5z0SdTqzeFhTAfBgNVHSMEGDAWgBS67Q41p7WNrCFZ9/HN
dApUuei0BzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTEyL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxub3RBYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxu
b3RBYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MTIvdzN3YXVpdi1RSnMzX2JnLWM5RW5VNnMzaFlVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBBt2ADANBgkqhkiG9w0BAQsFAAOCAQEAXD4OeGghw2KMtN0STTFXc2xuSTY2
eJD6qPs5E+oesxypay/lfQC96pkuf2S6mcUv3XJASxFMuT7qkSGsA3NKLV5hsZJ7
bFnUGSJV9oPTZIHPT2yYBuaaEDdRuYM4M8AXEI24QXBPv2ObJ/9hDSPud7q63HW0
gUuwEgfeDUUUhzNdHY9QnAv+iHOziyYnrq8I+1EBJ3LgL+X71zrrPSOrNo7FLN9I
JkYVyRj60BDBR39EBXLlyPLWvfa9AA0NX0OaX2AW1/iGXdNchc8zQZwXVw0GcL+Z
vXOA0auWrumXCqpdEPLjLg/1vlC2Wtt6YXLXXHZ+OAqYhzymQFwZ7/zLxQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:07:02 2025 by rpki-client